veto-sdk 2.2.1 → 2.4.0

package/dist/core/history.js

@@ -6,6 +6,10 @@
  *
  * @module core/history
  */
+import { mkdirSync, readFileSync, existsSync } from 'node:fs';
+import { appendFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { computeChainHash, GENESIS_HASH } from '../audit/chain.js';
 /**
  * Tracks the history of tool calls for context.
  */
@@ -13,9 +17,25 @@ export class HistoryTracker {
     entries = [];
     maxSize;
     logger;
+    auditLogPath;
+    prevHash = GENESIS_HASH;
+    pendingWrite = Promise.resolve();
     constructor(options) {
         this.maxSize = options.maxSize;
         this.logger = options.logger;
+        if (options.auditLog?.enabled) {
+            this.auditLogPath = options.auditLog.path ?? '.veto/audit.log';
+            try {
+                mkdirSync(dirname(this.auditLogPath), { recursive: true });
+            }
+            catch {
+                // If we can't create the dir, writes will fail and be caught per-record.
+            }
+            this.prevHash = this.recoverPrevHash();
+        }
+        else {
+            this.auditLogPath = null;
+        }
     }
     /**
      * Add an entry to the history.
@@ -45,6 +65,54 @@ export class HistoryTracker {
             decision: snapshotEntry.validationResult.decision,
             historySize: this.entries.length,
         });
+        if (this.auditLogPath !== null) {
+            this.appendAuditRecord(snapshotEntry);
+        }
+    }
+    entryToExportRecord(entry) {
+        const metadata = entry.validationResult.metadata;
+        return {
+            timestamp: entry.timestamp.toISOString(),
+            tool_name: entry.toolName,
+            arguments: entry.arguments,
+            policy_version: this.extractMetadataString(metadata, ['policyVersion', 'policy_version']),
+            rule_id: this.extractMetadataString(metadata, ['ruleId', 'rule_id']),
+            decision: entry.validationResult.decision,
+            reason: entry.validationResult.reason ?? null,
+        };
+    }
+    appendAuditRecord(entry) {
+        const record = this.entryToExportRecord(entry);
+        const hash = computeChainHash(this.prevHash, record);
+        this.prevHash = hash;
+        this.pendingWrite = this.pendingWrite.then(() => appendFile(this.auditLogPath, JSON.stringify({ ...record, chain_hash: hash }) + '\n', 'utf-8').catch((err) => {
+            this.logger.warn('Audit log write failed — continuing without audit record', {
+                error: err instanceof Error ? err.message : String(err),
+                path: this.auditLogPath,
+            });
+        }));
+    }
+    /** Await all pending audit log writes. Useful in tests and graceful shutdown. */
+    async flushAuditLog() {
+        await this.pendingWrite;
+    }
+    recoverPrevHash() {
+        if (!this.auditLogPath || !existsSync(this.auditLogPath))
+            return GENESIS_HASH;
+        try {
+            const content = readFileSync(this.auditLogPath, 'utf-8');
+            const lines = content.trimEnd().split('\n');
+            const lastLine = lines[lines.length - 1];
+            if (!lastLine)
+                return GENESIS_HASH;
+            const parsed = JSON.parse(lastLine);
+            if (typeof parsed['chain_hash'] === 'string')
+                return parsed['chain_hash'];
+        }
+        catch {
+            // Corrupted or empty file — start fresh
+        }
+        return GENESIS_HASH;
     }
     /**
      * Record a tool call in the history.
@@ -179,20 +247,12 @@ export class HistoryTracker {
         throw new Error(`Unsupported decision export format: ${String(format)}`);
     }
     toExportRecords() {
+        let prevHash = GENESIS_HASH;
         return this.entries.map((entry) => {
-            const metadata = entry.validationResult.metadata;
-            return {
-                timestamp: entry.timestamp.toISOString(),
-                tool_name: entry.toolName,
-                arguments: entry.arguments,
-                policy_version: this.extractMetadataString(metadata, [
-                    'policyVersion',
-                    'policy_version',
-                ]),
-                rule_id: this.extractMetadataString(metadata, ['ruleId', 'rule_id']),
-                decision: entry.validationResult.decision,
-                reason: entry.validationResult.reason ?? null,
-            };
+            const record = this.entryToExportRecord(entry);
+            const hash = computeChainHash(prevHash, record);
+            prevHash = hash;
+            return { ...record, chain_hash: hash };
         });
     }
     extractMetadataString(metadata, keys) {

package/dist/core/history.js.map

@@ -1 +1 @@
-{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/core/history.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAoBH;;GAEG;AACH,MAAM,OAAO,cAAc;IACR,OAAO,GAA2B,EAAE,CAAC;IACrC,OAAO,CAAS;IAChB,MAAM,CAAS;IAEhC,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAA2B;QAC7B,MAAM,aAAa,GAAyB;YAC1C,GAAG,KAAK;YACR,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;SAChD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBAC3D,WAAW,EAAE,OAAO,CAAC,QAAQ;oBAC7B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,QAAQ;YACjD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CACJ,QAAgB,EAChB,IAA6B,EAC7B,MAAwB,EACxB,UAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC;YACP,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,MAAM;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAA6B;QAClD,MAAM,mBAAmB,GAAG,UAAU,CAAC,eAE1B,CAAC;QAEd,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAA4B,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,KAAW,EACX,QAAc,IAAI,IAAI,EAAE;QAExB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAChE,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,MAAM,CAAC,CAC3E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEnE,QAAQ,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBACxC,KAAK,OAAO;oBACV,YAAY,EAAE,CAAC;oBACf,MAAM;gBACR,KAAK,MAAM;oBACT,WAAW,EAAE,CAAC;oBACd,MAAM;gBACR,KAAK,QAAQ;oBACX,aAAa,EAAE,CAAC;oBAChB,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC/B,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,WAAW;YACxB,aAAa,EAAE,aAAa;YAC5B,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAA+B,MAAM;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAEjD,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,cAAc,EAAE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE;oBACnD,eAAe;oBACf,gBAAgB;iBACjB,CAAC;gBACF,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACpE,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;gBACzC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,IAAI,IAAI;aAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAC3B,QAA6C,EAC7C,IAAc;QAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,OAA+B;QAC3C,MAAM,MAAM,GAAG;YACb,WAAW;YACX,WAAW;YACX,WAAW;YACX,gBAAgB;YAChB,SAAS;YACT,UAAU;YACV,QAAQ;SACT,CAAC;QAEF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,SAAS;YAChB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3B,MAAM,CAAC,OAAO,IAAI,EAAE;YACpB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,MAAM,IAAI,EAAE;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;aACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACrE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,IACE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;eAChB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;eACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;eACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvB,CAAC;YACD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/core/history.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAkBnE;;GAEG;AACH,MAAM,OAAO,cAAc;IACR,OAAO,GAA2B,EAAE,CAAC;IACrC,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,YAAY,CAAgB;IACrC,QAAQ,GAAW,YAAY,CAAC;IAChC,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAExD,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE7B,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,iBAAiB,CAAC;YAC/D,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,KAA2B;QAC7B,MAAM,aAAa,GAAyB;YAC1C,GAAG,KAAK;YACR,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;SAChD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEjC,8CAA8C;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBAC3D,WAAW,EAAE,OAAO,CAAC,QAAQ;oBAC7B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,QAAQ;YACjD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAA2B;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QACjD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;YACxC,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;YACzF,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACpE,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,QAAQ;YACzC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,IAAI,IAAI;SAC9C,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,KAA2B;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAC9C,UAAU,CACR,IAAI,CAAC,YAAa,EAClB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EACtD,OAAO,CACR,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;gBAC3E,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACvD,IAAI,EAAE,IAAI,CAAC,YAAY;aACxB,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,YAAY,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,OAAO,YAAY,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC/D,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CACJ,QAAgB,EAChB,IAA6B,EAC7B,MAAwB,EACxB,UAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC;YACP,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,MAAM;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAA6B;QAClD,MAAM,mBAAmB,GAAG,UAAU,CAAC,eAE1B,CAAC;QAEd,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAA4B,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAa;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,KAAW,EACX,QAAc,IAAI,IAAI,EAAE;QAExB,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAChE,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,MAAM,CAAC,CAC3E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEnE,QAAQ,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBACxC,KAAK,OAAO;oBACV,YAAY,EAAE,CAAC;oBACf,MAAM;gBACR,KAAK,MAAM;oBACT,WAAW,EAAE,CAAC;oBACd,MAAM;gBACR,KAAK,QAAQ;oBACX,aAAa,EAAE,CAAC;oBAChB,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC/B,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,WAAW;YACxB,aAAa,EAAE,aAAa;YAC5B,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAA+B,MAAM;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe;QACrB,IAAI,QAAQ,GAAG,YAAY,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAC3B,QAA6C,EAC7C,IAAc;QAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,OAA+B;QAC3C,MAAM,MAAM,GAAG;YACb,WAAW;YACX,WAAW;YACX,WAAW;YACX,gBAAgB;YAChB,SAAS;YACT,UAAU;YACV,QAAQ;SACT,CAAC;QAEF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,SAAS;YAChB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3B,MAAM,CAAC,OAAO,IAAI,EAAE;YACpB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,MAAM,IAAI,EAAE;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;aACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACrE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,IACE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;eAChB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;eACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;eACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvB,CAAC;YACD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/core/tool-pack-heuristics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-pack-heuristics.d.ts","sourceRoot":"","sources":["../../src/core/tool-pack-heuristics.ts"],"names":[],"mappings":"AAkHA,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,MAAM,EAAE,CAcV;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE7E"}
+{"version":3,"file":"tool-pack-heuristics.d.ts","sourceRoot":"","sources":["../../src/core/tool-pack-heuristics.ts"],"names":[],"mappings":"AAmJA,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,MAAM,EAAE,CAcV;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE7E"}

package/dist/core/tool-pack-heuristics.js

@@ -1,4 +1,37 @@
 const TOOL_PACK_HEURISTICS = [
+    {
+        patterns: [
+            'place_order',
+            'create_order',
+            'cancel_order',
+            'close_position',
+            'open_position',
+            'change_leverage',
+            'set_leverage',
+            'get_funding_rate',
+            'get_positions',
+            'get_orderbook',
+            'margin',
+            'liquidation',
+            'stop_loss',
+            'take_profit',
+            'futures',
+            'spot_trade',
+            'limit_order',
+            'market_order',
+            'leverage',
+            'place_bet',
+            'buy_shares',
+            'buy_outcome',
+            'get_markets',
+            'get_market_odds',
+            'redeem_shares',
+            'polymarket',
+            'prediction',
+            'trading',
+        ],
+        pack: '@veto/crypto-trading',
+    },
     {
         patterns: [
             'transfer',

package/dist/core/tool-pack-heuristics.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-pack-heuristics.js","sourceRoot":"","sources":["../../src/core/tool-pack-heuristics.ts"],"names":[],"mappings":"AAKA,MAAM,oBAAoB,GAAiC;IACzD;QACE,QAAQ,EAAE;YACR,UAAU;YACV,SAAS;YACT,SAAS;YACT,UAAU;YACV,SAAS;YACT,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,QAAQ;SACT;QACD,IAAI,EAAE,iBAAiB;KACxB;IACD;QACE,QAAQ,EAAE;YACR,UAAU;YACV,OAAO;YACP,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,WAAW;YACX,YAAY;YACZ,UAAU;YACV,aAAa;YACb,MAAM;YACN,KAAK;YACL,SAAS;SACV;QACD,IAAI,EAAE,0BAA0B;KACjC;IACD;QACE,QAAQ,EAAE;YACR,OAAO;YACP,KAAK;YACL,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,OAAO;YACP,cAAc;YACd,aAAa;YACb,IAAI;YACJ,YAAY;YACZ,UAAU;YACV,MAAM;YACN,WAAW;SACZ;QACD,IAAI,EAAE,mBAAmB;KAC1B;IACD;QACE,QAAQ,EAAE;YACR,MAAM;YACN,OAAO;YACP,SAAS;YACT,UAAU;YACV,MAAM;YACN,UAAU;YACV,YAAY;YACZ,WAAW;YACX,WAAW;YACX,aAAa;YACb,OAAO;YACP,MAAM;YACN,QAAQ;SACT;QACD,IAAI,EAAE,oBAAoB;KAC3B;IACD;QACE,QAAQ,EAAE;YACR,OAAO;YACP,YAAY;YACZ,cAAc;YACd,QAAQ;YACR,KAAK;YACL,OAAO;YACP,SAAS;YACT,MAAM;YACN,cAAc;YACd,MAAM;YACN,OAAO;SACR;QACD,IAAI,EAAE,qBAAqB;KAC5B;IACD;QACE,QAAQ,EAAE;YACR,QAAQ;YACR,SAAS;YACT,SAAS;YACT,MAAM;YACN,UAAU;YACV,WAAW;YACX,WAAW;YACX,YAAY;YACZ,KAAK;YACL,QAAQ;YACR,MAAM;YACN,OAAO;SACR;QACD,IAAI,EAAE,kBAAkB;KACzB;CACF,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAC/C,SAA4B;IAE5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE1C,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAAgB;IACjE,OAAO,iCAAiC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"tool-pack-heuristics.js","sourceRoot":"","sources":["../../src/core/tool-pack-heuristics.ts"],"names":[],"mappings":"AAKA,MAAM,oBAAoB,GAAiC;IACzD;QACE,QAAQ,EAAE;YACR,aAAa;YACb,cAAc;YACd,cAAc;YACd,gBAAgB;YAChB,eAAe;YACf,iBAAiB;YACjB,cAAc;YACd,kBAAkB;YAClB,eAAe;YACf,eAAe;YACf,QAAQ;YACR,aAAa;YACb,WAAW;YACX,aAAa;YACb,SAAS;YACT,YAAY;YACZ,aAAa;YACb,cAAc;YACd,UAAU;YACV,WAAW;YACX,YAAY;YACZ,aAAa;YACb,aAAa;YACb,iBAAiB;YACjB,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,SAAS;SACV;QACD,IAAI,EAAE,sBAAsB;KAC7B;IACD;QACE,QAAQ,EAAE;YACR,UAAU;YACV,SAAS;YACT,SAAS;YACT,UAAU;YACV,SAAS;YACT,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,QAAQ;SACT;QACD,IAAI,EAAE,iBAAiB;KACxB;IACD;QACE,QAAQ,EAAE;YACR,UAAU;YACV,OAAO;YACP,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,WAAW;YACX,YAAY;YACZ,UAAU;YACV,aAAa;YACb,MAAM;YACN,KAAK;YACL,SAAS;SACV;QACD,IAAI,EAAE,0BAA0B;KACjC;IACD;QACE,QAAQ,EAAE;YACR,OAAO;YACP,KAAK;YACL,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,OAAO;YACP,cAAc;YACd,aAAa;YACb,IAAI;YACJ,YAAY;YACZ,UAAU;YACV,MAAM;YACN,WAAW;SACZ;QACD,IAAI,EAAE,mBAAmB;KAC1B;IACD;QACE,QAAQ,EAAE;YACR,MAAM;YACN,OAAO;YACP,SAAS;YACT,UAAU;YACV,MAAM;YACN,UAAU;YACV,YAAY;YACZ,WAAW;YACX,WAAW;YACX,aAAa;YACb,OAAO;YACP,MAAM;YACN,QAAQ;SACT;QACD,IAAI,EAAE,oBAAoB;KAC3B;IACD;QACE,QAAQ,EAAE;YACR,OAAO;YACP,YAAY;YACZ,cAAc;YACd,QAAQ;YACR,KAAK;YACL,OAAO;YACP,SAAS;YACT,MAAM;YACN,cAAc;YACd,MAAM;YACN,OAAO;SACR;QACD,IAAI,EAAE,qBAAqB;KAC5B;IACD;QACE,QAAQ,EAAE;YACR,QAAQ;YACR,SAAS;YACT,SAAS;YACT,MAAM;YACN,UAAU;YACV,WAAW;YACX,WAAW;YACX,YAAY;YACZ,KAAK;YACL,QAAQ;YACR,MAAM;YACN,OAAO;SACR;QACD,IAAI,EAAE,kBAAkB;KACzB;CACF,CAAC;AAEF,MAAM,UAAU,iCAAiC,CAC/C,SAA4B;IAE5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE1C,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAAgB;IACjE,OAAO,iCAAiC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/validator.d.ts

@@ -7,6 +7,7 @@
  */
 import type { NamedValidator, ValidationContext, ValidationResult, Validator } from '../types/config.js';
 import type { Logger } from '../utils/logger.js';
+import type { VetoTracer } from '../observability/otel.js';
 /**
  * Options for the validation engine.
  */
@@ -15,6 +16,8 @@ export interface ValidationEngineOptions {
     logger: Logger;
     /** Default decision when no validators match */
     defaultDecision: 'allow' | 'deny' | 'modify';
+    /** Optional OpenTelemetry tracer — no-op when null */
+    otelTracer?: VetoTracer | null;
 }
 /**
  * Result of running all validators.
@@ -38,6 +41,7 @@ export declare class ValidationEngine {
     private readonly validators;
     private readonly logger;
     private readonly defaultDecision;
+    private readonly otelTracer;
     constructor(options: ValidationEngineOptions);
     /**
      * Add a validator to the engine.

package/dist/core/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACV,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,eAAe,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,kDAAkD;IAClD,WAAW,EAAE,gBAAgB,CAAC;IAC9B,yCAAyC;IACzC,gBAAgB,EAAE,KAAK,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,gBAAgB,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;gBAElD,OAAO,EAAE,uBAAuB;IAK5C;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,IAAI;IAWzD;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,GAAG,IAAI;IAYlE;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAUtC;;OAEG;IACH,eAAe,IAAI,IAAI;IAKvB;;OAEG;IACH,aAAa,IAAI,SAAS,cAAc,EAAE;IAI1C;;;;;;;;OAQG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAiI/E;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAUhC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,cAAc,CAO3D;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,SAAoB,GACzB,cAAc,CAWhB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,SAA6B,GAClC,cAAc,CAgBhB"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACV,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,eAAe,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7C,sDAAsD;IACtD,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,kDAAkD;IAClD,WAAW,EAAE,gBAAgB,CAAC;IAC9B,yCAAyC;IACzC,gBAAgB,EAAE,KAAK,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,gBAAgB,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,OAAO,EAAE,uBAAuB;IAM5C;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,IAAI;IAWzD;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,GAAG,IAAI;IAYlE;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAUtC;;OAEG;IACH,eAAe,IAAI,IAAI;IAKvB;;OAEG;IACH,aAAa,IAAI,SAAS,cAAc,EAAE;IAI1C;;;;;;;;OAQG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqJ/E;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAUhC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,cAAc,CAO3D;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,SAAoB,GACzB,cAAc,CAWhB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,SAA6B,GAClC,cAAc,CAgBhB"}

package/dist/core/validator.js

@@ -13,9 +13,11 @@ export class ValidationEngine {
     validators = [];
     logger;
     defaultDecision;
+    otelTracer;
     constructor(options) {
         this.logger = options.logger;
         this.defaultDecision = options.defaultDecision;
+        this.otelTracer = options.otelTracer ?? null;
     }
     /**
      * Add a validator to the engine.
@@ -86,117 +88,137 @@ export class ValidationEngine {
      * @returns Aggregated validation result
      */
     async validate(context) {
+        const span = this.otelTracer?.startSpan('veto.validate') ?? null;
         const startTime = performance.now();
         const validatorResults = [];
-        // Get validators that apply to this tool
-        const applicableValidators = this.getApplicableValidators(context.toolName);
-        this.logger.debug('Starting validation', {
-            toolName: context.toolName,
-            callId: context.callId,
-            validatorCount: applicableValidators.length,
-        });
-        // If no validators, return default decision
-        if (applicableValidators.length === 0) {
-            const defaultResult = { decision: this.defaultDecision };
-            this.logger.debug('No applicable validators, using default decision', {
-                decision: this.defaultDecision,
+        try {
+            // Get validators that apply to this tool
+            const applicableValidators = this.getApplicableValidators(context.toolName);
+            this.logger.debug('Starting validation', {
+                toolName: context.toolName,
+                callId: context.callId,
+                validatorCount: applicableValidators.length,
             });
-            return {
-                finalResult: defaultResult,
-                validatorResults: [],
-                totalDurationMs: performance.now() - startTime,
-            };
-        }
-        let finalResult = { decision: 'allow' };
-        let currentContext = context;
-        // Run validators in sequence
-        for (const validator of applicableValidators) {
-            const validatorStart = performance.now();
-            try {
-                const result = await validator.validate(currentContext);
-                const durationMs = performance.now() - validatorStart;
-                validatorResults.push({
-                    validatorName: validator.name,
-                    result,
-                    durationMs,
-                });
-                this.logger.debug('Validator completed', {
-                    validatorName: validator.name,
-                    decision: result.decision,
-                    durationMs: Math.round(durationMs * 100) / 100,
+            // If no validators, return default decision
+            if (applicableValidators.length === 0) {
+                const defaultResult = { decision: this.defaultDecision };
+                this.logger.debug('No applicable validators, using default decision', {
+                    decision: this.defaultDecision,
                 });
-                // Handle different decisions
-                if (result.decision === 'deny') {
-                    // Stop on first denial
-                    finalResult = result;
-                    this.logger.info('Tool call denied by validator', {
-                        toolName: context.toolName,
-                        callId: context.callId,
-                        validator: validator.name,
-                        reason: result.reason,
+                const totalDurationMs = performance.now() - startTime;
+                span?.setAttribute('tool.name', context.toolName);
+                span?.setAttribute('veto.decision', defaultResult.decision);
+                span?.setAttribute('veto.duration_ms', totalDurationMs);
+                span?.end();
+                return {
+                    finalResult: defaultResult,
+                    validatorResults: [],
+                    totalDurationMs,
+                };
+            }
+            let finalResult = { decision: 'allow' };
+            let currentContext = context;
+            // Run validators in sequence
+            for (const validator of applicableValidators) {
+                const validatorStart = performance.now();
+                try {
+                    const result = await validator.validate(currentContext);
+                    const durationMs = performance.now() - validatorStart;
+                    validatorResults.push({
+                        validatorName: validator.name,
+                        result,
+                        durationMs,
                     });
-                    break;
+                    this.logger.debug('Validator completed', {
+                        validatorName: validator.name,
+                        decision: result.decision,
+                        durationMs: Math.round(durationMs * 100) / 100,
+                    });
+                    // Handle different decisions
+                    if (result.decision === 'deny') {
+                        // Stop on first denial
+                        finalResult = result;
+                        this.logger.info('Tool call denied by validator', {
+                            toolName: context.toolName,
+                            callId: context.callId,
+                            validator: validator.name,
+                            reason: result.reason,
+                        });
+                        break;
+                    }
+                    else if (result.decision === 'require_approval') {
+                        // Stop on approval requirement so callers can route to HITL flows.
+                        finalResult = result;
+                        this.logger.info('Tool call requires approval by validator', {
+                            toolName: context.toolName,
+                            callId: context.callId,
+                            validator: validator.name,
+                            reason: result.reason,
+                        });
+                        break;
+                    }
+                    else if (result.decision === 'modify' && result.modifiedArguments) {
+                        // Update context with modified arguments for next validator
+                        currentContext = {
+                            ...currentContext,
+                            arguments: result.modifiedArguments,
+                        };
+                        finalResult = result;
+                    }
+                    else if (result.decision === 'allow') {
+                        // Continue to next validator
+                        finalResult = result;
+                    }
                 }
-                else if (result.decision === 'require_approval') {
-                    // Stop on approval requirement so callers can route to HITL flows.
-                    finalResult = result;
-                    this.logger.info('Tool call requires approval by validator', {
+                catch (error) {
+                    const durationMs = performance.now() - validatorStart;
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    this.logger.error('Validator threw an error', {
+                        validatorName: validator.name,
                         toolName: context.toolName,
                         callId: context.callId,
-                        validator: validator.name,
-                        reason: result.reason,
+                    }, error instanceof Error ? error : new Error(errorMessage));
+                    // Treat validator errors as denials for safety
+                    validatorResults.push({
+                        validatorName: validator.name,
+                        result: {
+                            decision: 'deny',
+                            reason: `Validator error: ${errorMessage}`,
+                        },
+                        durationMs,
                     });
-                    break;
-                }
-                else if (result.decision === 'modify' && result.modifiedArguments) {
-                    // Update context with modified arguments for next validator
-                    currentContext = {
-                        ...currentContext,
-                        arguments: result.modifiedArguments,
+                    finalResult = {
+                        decision: 'deny',
+                        reason: `Validator "${validator.name}" threw an error: ${errorMessage}`,
                     };
-                    finalResult = result;
-                }
-                else if (result.decision === 'allow') {
-                    // Continue to next validator
-                    finalResult = result;
+                    break;
                 }
             }
-            catch (error) {
-                const durationMs = performance.now() - validatorStart;
-                const errorMessage = error instanceof Error ? error.message : String(error);
-                this.logger.error('Validator threw an error', {
-                    validatorName: validator.name,
-                    toolName: context.toolName,
-                    callId: context.callId,
-                }, error instanceof Error ? error : new Error(errorMessage));
-                // Treat validator errors as denials for safety
-                validatorResults.push({
-                    validatorName: validator.name,
-                    result: {
-                        decision: 'deny',
-                        reason: `Validator error: ${errorMessage}`,
-                    },
-                    durationMs,
-                });
-                finalResult = {
-                    decision: 'deny',
-                    reason: `Validator "${validator.name}" threw an error: ${errorMessage}`,
-                };
-                break;
+            const totalDurationMs = performance.now() - startTime;
+            this.logger.debug('Validation complete', {
+                toolName: context.toolName,
+                callId: context.callId,
+                finalDecision: finalResult.decision,
+                totalDurationMs: Math.round(totalDurationMs * 100) / 100,
+            });
+            span?.setAttribute('tool.name', context.toolName);
+            span?.setAttribute('veto.decision', finalResult.decision);
+            if (finalResult.metadata?.ruleId !== undefined) {
+                span?.setAttribute('veto.rule_id', String(finalResult.metadata.ruleId));
             }
+            span?.setAttribute('veto.duration_ms', totalDurationMs);
+            span?.end();
+            return {
+                finalResult,
+                validatorResults,
+                totalDurationMs,
+            };
+        }
+        catch (err) {
+            span?.setStatus({ code: 2 }); // SpanStatusCode.ERROR
+            span?.end();
+            throw err;
         }
-        const totalDurationMs = performance.now() - startTime;
-        this.logger.debug('Validation complete', {
-            toolName: context.toolName,
-            callId: context.callId,
-            finalDecision: finalResult.decision,
-            totalDurationMs: Math.round(totalDurationMs * 100) / 100,
-        });
-        return {
-            finalResult,
-            validatorResults,
-            totalDurationMs,
-        };
     }
     /**
      * Sort validators by priority (lower runs first).

package/dist/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA6BxD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,UAAU,GAAqB,EAAE,CAAC;IAClC,MAAM,CAAS;IACf,eAAe,CAA8B;IAE9D,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAqC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAA6C;QACzD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAmD,EAAE,CAAC;QAE5E,yCAAyC;QACzC,MAAM,oBAAoB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,oBAAoB,CAAC,MAAM;SAC5C,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,aAAa,GAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBACpE,QAAQ,EAAE,IAAI,CAAC,eAAe;aAC/B,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,aAAa;gBAC1B,gBAAgB,EAAE,EAAE;gBACpB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC/C,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,GAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC1D,IAAI,cAAc,GAAG,OAAO,CAAC;QAE7B,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBAEtD,gBAAgB,CAAC,IAAI,CAAC;oBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBACvC,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;iBAC/C,CAAC,CAAC;gBAEH,6BAA6B;gBAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC/B,uBAAuB;oBACvB,WAAW,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;wBAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,SAAS,CAAC,IAAI;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBAClD,mEAAmE;oBACnE,WAAW,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;wBAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,SAAS,CAAC,IAAI;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACpE,4DAA4D;oBAC5D,cAAc,GAAG;wBACf,GAAG,cAAc;wBACjB,SAAS,EAAE,MAAM,CAAC,iBAAiB;qBACpC,CAAC;oBACF,WAAW,GAAG,MAAM,CAAC;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACvC,6BAA6B;oBAC7B,WAAW,GAAG,MAAM,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBACtD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,EAC1B;oBACE,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,EACD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CACzD,CAAC;gBAEF,+CAA+C;gBAC/C,gBAAgB,CAAC,IAAI,CAAC;oBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,MAAM,EAAE;wBACN,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,oBAAoB,YAAY,EAAE;qBAC3C;oBACD,UAAU;iBACX,CAAC,CAAC;gBAEH,WAAW,GAAG;oBACZ,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc,SAAS,CAAC,IAAI,qBAAqB,YAAY,EAAE;iBACxE,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,aAAa,EAAE,WAAW,CAAC,QAAQ;YACnC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,GAAG,GAAG;SACzD,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,gBAAgB;YAChB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,QAAgB;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YAC1C,yDAAyD;YACzD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE,IAAI,EAAE,WAAW;QAC3B,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,iBAAiB;IAE1B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;SACzC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,0BAA0B;IAEnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;aACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAgCxD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,UAAU,GAAqB,EAAE,CAAC;IAClC,MAAM,CAAS;IACf,eAAe,CAA8B;IAC7C,UAAU,CAAoB;IAE/C,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAqC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAA6C;QACzD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAmD,EAAE,CAAC;QAE5E,IAAI,CAAC;YACH,yCAAyC;YACzC,MAAM,oBAAoB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,oBAAoB,CAAC,MAAM;aAC5C,CAAC,CAAC;YAEH,4CAA4C;YAC5C,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;oBACpE,QAAQ,EAAE,IAAI,CAAC,eAAe;iBAC/B,CAAC,CAAC;gBACH,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACtD,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClD,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,EAAE,YAAY,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;gBACxD,IAAI,EAAE,GAAG,EAAE,CAAC;gBACZ,OAAO;oBACL,WAAW,EAAE,aAAa;oBAC1B,gBAAgB,EAAE,EAAE;oBACpB,eAAe;iBAChB,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,GAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC1D,IAAI,cAAc,GAAG,OAAO,CAAC;YAE7B,6BAA6B;YAC7B,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAEzC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACxD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;oBAEtD,gBAAgB,CAAC,IAAI,CAAC;wBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,MAAM;wBACN,UAAU;qBACX,CAAC,CAAC;oBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;wBACvC,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;qBAC/C,CAAC,CAAC;oBAEH,6BAA6B;oBAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;wBAC/B,uBAAuB;wBACvB,WAAW,GAAG,MAAM,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;4BAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,SAAS,CAAC,IAAI;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;wBAClD,mEAAmE;wBACnE,WAAW,GAAG,MAAM,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;4BAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,SAAS,CAAC,IAAI;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;wBACpE,4DAA4D;wBAC5D,cAAc,GAAG;4BACf,GAAG,cAAc;4BACjB,SAAS,EAAE,MAAM,CAAC,iBAAiB;yBACpC,CAAC;wBACF,WAAW,GAAG,MAAM,CAAC;oBACvB,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;wBACvC,6BAA6B;wBAC7B,WAAW,GAAG,MAAM,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;oBACtD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,EAC1B;wBACE,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,EACD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CACzD,CAAC;oBAEF,+CAA+C;oBAC/C,gBAAgB,CAAC,IAAI,CAAC;wBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,MAAM,EAAE;4BACN,QAAQ,EAAE,MAAM;4BAChB,MAAM,EAAE,oBAAoB,YAAY,EAAE;yBAC3C;wBACD,UAAU;qBACX,CAAC,CAAC;oBAEH,WAAW,GAAG;wBACZ,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,cAAc,SAAS,CAAC,IAAI,qBAAqB,YAAY,EAAE;qBACxE,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,GAAG,GAAG;aACzD,CAAC,CAAC;YAEH,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/C,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,EAAE,YAAY,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YACxD,IAAI,EAAE,GAAG,EAAE,CAAC;YAEZ,OAAO;gBACL,WAAW;gBACX,gBAAgB;gBAChB,eAAe;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;YACrD,IAAI,EAAE,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,QAAgB;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YAC1C,yDAAyD;YACzD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE,IAAI,EAAE,WAAW;QAC3B,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,iBAAiB;IAE1B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;SACzC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,0BAA0B;IAEnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;aACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/veto.d.ts

@@ -15,11 +15,12 @@ import type { EconomicContext, EconomicDenialDetails, EconomicPolicyConfig, Budg
 import type { MCPTool, MCPServerClient, MCPToolResult } from '../providers/types.js';
 import type { RuleSeverity } from '../rules/types.js';
 import type { KernelClient as KernelClientType } from '../kernel/client.js';
-import type { CloudToolRegistration } from '../cloud/types.js';
+import type { ApprovalData, ApprovalPollOptions, CloudToolRegistration } from '../cloud/types.js';
 import { VetoCloudClient } from '../cloud/client.js';
 import { type OutputValidationResult } from './output-validator.js';
 import type { VetoBrowserOptions as SharedVetoBrowserOptions, VetoFromCloudOptions as SharedVetoFromCloudOptions } from '../browser/types.js';
 import { type VetoWebhookEventType } from './events.js';
+import { type VetoTracer } from '../observability/otel.js';
 /**
  * Veto operating mode.
  * - "strict": Block tool calls when validation fails
@@ -36,6 +37,7 @@ export type VetoMode = 'strict' | 'log' | 'shadow';
  * - "cloud": Use Veto Cloud API with approval workflow support
  */
 export type ValidationMode = 'local' | 'api' | 'kernel' | 'custom' | 'cloud';
+type StartupMode = 'local' | 'cloud' | 'self-hosted' | 'api' | 'kernel' | 'custom';
 /**
  * Wrapped handler function type.
  */
@@ -78,6 +80,13 @@ export interface GuardResult {
     /** Structured economic denial details (present when economic policy denies) */
     economicDenial?: EconomicDenialDetails;
 }
+export interface VetoRuntimeInfo {
+    configDir: string;
+    mode: VetoMode;
+    validationMode: ValidationMode;
+    startupMode: StartupMode;
+    cloudReady: boolean;
+}
 /**
  * Parsed veto.config.yaml structure.
  */
@@ -153,6 +162,13 @@ interface VetoConfigFile {
     };
     /** Economic authorization policy (x402, MPP, AP2 support) */
     economic?: EconomicPolicyConfig;
+    /** Tamper-evident append-only audit log configuration */
+    audit?: {
+        /** Enable the audit log. Defaults to false. */
+        enabled?: boolean;
+        /** Path for the audit log file. Defaults to .veto/audit.log */
+        path?: string;
+    };
 }
 /**
  * Options for creating a Veto instance.
@@ -231,6 +247,29 @@ export interface VetoOptions {
     onDecisionMade?: (result: GuardResult & {
         toolName: string;
     }) => void;
+    /**
+     * OpenTelemetry integration options.
+     * Requires @opentelemetry/api as an optional peer dependency.
+     * When @opentelemetry/api is not installed, all spans are no-ops.
+     */
+    telemetry?: {
+        /** Set to false to disable OTEL instrumentation entirely. Defaults to true (auto-detect). */
+        enabled?: boolean;
+        /** Service name reported to the tracer. Defaults to 'veto-sdk'. */
+        serviceName?: string;
+    };
+    /**
+     * Tamper-evident append-only audit log. Each decision is hashed and chained.
+     * Verify with `veto audit verify`.
+     */
+    audit?: {
+        /** Enable the audit log. Defaults to false. */
+        enabled?: boolean;
+        /** Path for the audit log file. Defaults to .veto/audit.log */
+        path?: string;
+    };
+    /** @internal Pre-resolved tracer injected by init() after async OTEL load. */
+    _otelTracer?: VetoTracer | null;
 }
 export type VetoBrowserOptions = SharedVetoBrowserOptions<VetoCloudClient> & {
     budget?: VetoConfigFile['budget'];
@@ -304,6 +343,7 @@ export declare class Veto {
     private readonly browserMode;
     private readonly compiledExpressionCache;
     private refreshIntervalId;
+    private otelTracer;
     private constructor();
     /**
      * Initialize Veto by loading configuration and rules.
@@ -504,7 +544,7 @@ export declare class Veto {
      * const wrappedTools = veto.wrap(tools);
      *
      * const agent = createAgent({
-     *   model: 'openai:gpt-4o',
+     *   model: 'openai:gpt-5.4',
      *   tools: wrappedTools, // Same type as input!
      * });
      * ```
@@ -565,6 +605,15 @@ export declare class Veto {
      * Validate and transform tool output against configured output rules.
      */
     validateOutput(toolName: string, output: unknown): OutputValidationResult;
+    isCloudReady(): boolean;
+    getRuntimeInfo(): VetoRuntimeInfo;
+    waitForApproval(approvalId: string, options?: ApprovalPollOptions): Promise<ApprovalData>;
+    logToolExecution(toolName: string, args: Record<string, unknown>, result: unknown, context?: {
+        toolCallId?: string;
+        sessionId?: string;
+        agentId?: string;
+        error?: unknown;
+    }): void;
     /**
      * Run a standalone guard check without wrapping or executing a tool.
      *
@@ -623,6 +672,8 @@ export declare class Veto {
      */
     resetEconomicBudget(scope?: BudgetScope): void;
     dispose(): void;
+    /** Await pending async audit log writes. Call before reading the log in tests or on shutdown. */
+    flushAuditLog(): Promise<void>;
 }
 export { ToolCallDeniedError };
 export { BudgetExceededError };